> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hypastack.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Account & Passkeys

> How the account model works, and how to turn on API access.

## No email, no password

Hypastack accounts don't use an email address or a chosen password. When you create an account, you get:

* A randomly generated **account ID**.
* A **passkey**, a long random secret (not something you choose), shown once at creation. Hypastack stores only a one-way hash of it and cannot show it to you again or recover it if you lose it.

An optional nickname is encrypted in your browser before it reaches Hypastack. Avatar, banner, and display name are optional too, none of it is required to use the platform.

<Warning>
  Because there's no email tied to your account, there's no "forgot password" flow. If you lose your passkey, you lose access to that account. Store it somewhere safe.
</Warning>

## Sessions and API keys

Signing in creates a session; Hypastack stores a one-way hash of the session's refresh token, never the token itself. Developer API keys work the same way, a one-way hash and a short hint are stored, never the full key, which is shown to you once at creation.

## Turning on Developer mode

To create an API key:

<Steps>
  <Step title="Open Settings → Account">
    From your dashboard.
  </Step>

  <Step title="Turn on Developer mode">
    This reveals the Developer tab.
  </Step>

  <Step title="Go to the Developer tab and hit New key">
    Pick a name and tick only the scopes you actually need, see [Authentication & Scopes](/api-reference/authentication).
  </Step>

  <Step title="Copy the key immediately">
    It's shown once and never again.
  </Step>
</Steps>

<Note>
  API access requires a paid plan. Free accounts can use the dashboard but can't create API keys. See [Pricing & Plans](/pricing).
</Note>